This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft
File:                     E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft (raw, json)
Hash identifier:          7fd61qc7pvL/rTThGiNGXfSnFScRpbpc9QzjL5/7MHc=
Subject key identifier:   9E:E2:A0:79:03:64:35:69:DE:D5:A7:41:37:AE:0C:C3:F1:39:20:14
Authority key identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C
Certificate issuer:       /CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C
Certificate serial:       7F291C016D971B9CBEB25CA4F51F3EC279516424
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft
Manifest number:          01F1
Signing time:             Tue 16 Dec 2025 22:00:47 +0000
Manifest this update:     Tue 16 Dec 2025 21:55:47 +0000
Manifest next update:     Sat 20 Dec 2025 03:36:47 +0000
Files and hashes:         1: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: l7e04tx4Mr56W+sGrraQme0eR5MHoJterHz1neaHXyk=)
                          2: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl (hash: uDVihWPpVOWwyYQ3G9Ve6OHOHACrIlShrrq1/6MdRYQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl
                          rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 03:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:29:1c:01:6d:97:1b:9c:be:b2:5c:a4:f5:1f:3e:c2:79:51:64:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C
        Validity
            Not Before: Dec 16 21:55:47 2025 GMT
            Not After : Dec 20 03:36:47 2025 GMT
        Subject: CN=9EE2A07903643569DED5A74137AE0CC3F1392014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:bb:ce:3c:bf:57:e8:b9:da:dd:44:81:1f:
                    fd:a8:fe:5a:1e:b1:99:85:f4:99:88:d6:32:17:44:
                    3a:d5:66:9b:11:2f:ff:d0:47:c0:ab:4f:64:c9:c4:
                    0a:64:f7:fc:56:50:7f:95:4b:48:99:88:9b:b4:e7:
                    08:e0:e3:52:fe:c2:c4:3a:ab:2a:46:a6:69:6c:fb:
                    af:31:7f:89:4e:80:f1:09:77:02:66:47:0a:37:ab:
                    eb:85:2b:44:99:a8:b1:7c:fa:33:db:8f:d6:d2:1d:
                    86:a7:ce:69:15:a0:c4:db:bb:35:97:7c:50:f0:b8:
                    78:da:e8:e1:95:9d:02:67:b6:7c:0a:d1:2d:bc:9a:
                    a3:18:89:c1:59:8b:d5:43:46:9f:1a:46:a4:b1:ad:
                    b6:f0:c0:fd:a0:8d:c8:d3:6c:4f:9f:b2:cf:99:2f:
                    02:6e:2b:6e:a9:40:4c:11:a1:d2:b9:ec:ec:98:be:
                    83:e5:46:bb:76:bb:c7:8d:65:09:9a:f3:26:b0:d4:
                    84:94:df:87:10:21:9e:47:a3:5c:97:64:81:30:2b:
                    f5:a1:16:d8:85:3c:92:cf:6d:ce:e9:28:58:6a:ec:
                    11:64:33:9d:6f:de:c7:5f:87:c8:b0:f2:11:65:92:
                    2c:8c:5e:5c:27:d4:5d:56:86:92:a6:7a:0e:68:47:
                    a9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E2:A0:79:03:64:35:69:DE:D5:A7:41:37:AE:0C:C3:F1:39:20:14
            X509v3 Authority Key Identifier:
                keyid:E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:19:9b:01:b0:b2:4f:7c:86:d5:3e:4b:b7:13:b8:7f:20:1e:
         8f:38:ba:47:6b:71:8e:df:51:d7:bb:34:cd:2c:7e:3a:6d:3d:
         95:a4:fc:f8:3c:0e:3a:b0:6d:75:dd:24:8c:c4:72:bf:68:81:
         c9:fc:7c:1e:d3:96:e4:7f:50:50:f3:9c:d7:69:83:33:e3:47:
         46:91:98:1a:8b:0c:4b:1c:fa:b0:dd:aa:1b:65:30:0a:6c:04:
         2f:63:01:eb:60:af:d7:46:b6:e3:0d:40:e1:89:54:0b:47:de:
         22:d3:2c:b6:94:13:13:31:2a:8c:b0:9e:db:6a:03:5e:cf:0b:
         ec:b5:e2:f7:1d:4d:9c:66:2d:b5:09:24:47:6c:e8:f4:2b:b1:
         ea:8c:fb:95:0e:6e:27:c8:18:4d:cd:7e:3f:ec:12:94:d8:19:
         e9:c9:f7:81:83:61:d1:9e:18:b5:c0:e1:87:4e:89:54:f0:d1:
         b2:a2:66:9d:ca:81:57:a7:24:1f:50:ca:b6:49:62:c6:88:4b:
         b4:11:82:73:91:49:c2:65:22:31:d2:a2:63:8f:81:b6:62:4e:
         65:8f:08:0b:29:86:18:8d:e6:3d:7e:52:4b:57:88:7b:df:16:
         3a:6c:b2:69:9a:91:1f:f8:69:01:6d:3b:06:dd:84:09:5c:52:
         91:ca:f5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:25:22 2025 by rpki-client